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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 



Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) FROM 
THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If the period for reply specified above is less than thirty (30) days, a reply within the statutory minimum of thirty (30) days will be considered timely. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1 )[3 Responsive to communication(s) filed on 20 February 2002 . 
2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quay/e, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) E3 Claim(s) 7-78 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) S Claim(s) 7-78 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) ^ The drawing(s) filed on 20 February 2002 is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121 (d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 1 9(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. D Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1 ) S Notice of References Cited (PTO-892) 4) ED Interview Summary (PTO-413) 

2) □ Notice of Draftsperson's Patent Drawing Review (PTO-948) Paper No(s)/Mail Date. . 

3) O Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 5) □ Notice of Informal Patent Application (PTO-1 52) 

Paper No(syMail Date 2/20/02 . 6) □ Other: . 
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PTOL-326 (Rev. 1-04) 
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DETAILED ACTION 

1 . This action is a first Non-Final Office Action in regard to Application No. 
10/079005 filed on February 20, 2002. 

2. Claims 1 -1 8 are presented for examination, of which Claims 1 , 1 4 and 1 8 are 
independent. 

3. Claims 1-18, are rejected under 35 U.S.C. 103(a). 

Priority 

4. Applicant's claim for domestic priority under 35 U.S.C. §1 1 9(e) is acknowledged; 
the Applicant was accorded the benefit of the earlier filing date of February 20, 2001 . 

Specification 

5. Claims 9 and 1 1 are objected to because of the following informalities: 
The limitation "further for entering" seems to have missing text. Appropriate 

correction is required. 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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7. Claims 1-18, are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Karen Brodersen (U.S. Patent No. 6,732,100 and Brodersen hereinafter) in view of 
Teresa Win (U.S. Patent No. 6,453,353 and Win hereinafter). 

Regarding Claims 1, 6, 14 and 18, Brodersen discloses: 

a database with a plurality of portions (Abstract; see also Col 1 , Lines 50-55, i.e. 
data item or view; see also Col 4, Lines 58-65; see also Col 5, Lines 1-10) for 
selectively receiving and supplying data (Col 6, Lines 54-67); 

entering access roles for each user (Col 2, Lines 15-24; see also Col 2, Line 57 
through Col 3, Line 4; see also Col 3, Lines 25-36); and 

an access controller for controlling access by each user for selected ones of said 
plurality of portions of said database (Col 1, Lines 50-55, i.e. access control) with 
access roles which match the access role of the user (Col 1 , Line 55 through Col 2, Line 
2, i.e. the database views are visible to users based upon the personal, positional and 
organizational attributes : see also Col 2, Line 57 through Col 3, Line 4, i.e. role) 
supplying the access role of manager (owner) (Abstract, i.e. granting of access to data and 
files by the file or database creator, owner or manager or by group or user access profiles; see also 
Col 1 , Lines 6-8) 1 to very access privileges for other users (Col 2, Lines 1 5-24; see also 
Col 9, Line 64 through Col 10, Line 3). 
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Brodersen reference discloses all of the claimed subject matter set forth above, 
except it does not explicitly indicate the web pages including a set of web pages for 
viewing and entering data; and nor does the reference indicate an access controller for 
controlling access by each user for selected ones of said web pages. 

However, Win discloses web pages (resources) 2 including a set of web pages for 
viewing and entering data (Col 2, Lines 41-56) and an access controller for controlling 
access by each user for selected ones of said web pages (Col 2, Lines 41-67). 

Given the intended broad application of the Brodersen system, It would have 
been obvious to a person of ordinary skill in the art at the time of Applicant's invention to 
modify the teachings of Brodersen with the teachings of Win to include not just access 
restrictions to parts of database applications but also access restriction to web pages 
such as web applications as one good reason would be due to the increase usage of 
the web based application in order to reach a larger community of users accessing the 
databases through the Internet and the Intranet; also to maintain data privacy and 
sensitivity to certain data on the web just as it is on the databases. 

Regarding Claim 2, Brodersen discloses tables and objects (Figures 1 and 2 and 
corresponding text). 



1 Please note that Brodersen interpretation of the manager is the same as the owner, as both are able to 
grant access to other users (see Claim 1, Lines 13-15 of the instant application) and (Col 2, Lines 15-24). 

Please note that Win is using the word "resources" as the "web pages" in the current Application, please 
see Win's Abstract, i.e. web resources. 
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Regarding Claim 3, Win discloses client portions (Figure No. 10C and 
corresponding text) and rule portions (Figure 10B and corresponding text). 

Regarding Claims 4 and 15, Win discloses: 

a static portion (Figure No. 10B, Elements No. 1022, 1023, 1024 and 1026 as in 
the layout of the web interface of the browser; see also Col 5, Lines 13-20); 

an interpreted portion (Figure No. 10B, Elements No. 1028a-1028n, the content 
of 1023 and the content of 1024; see also Col 5, Lines 13-20); and 

said access controller conditionally interpreting said interpreted portion 
depending on a correlation between an access role associated with said interpreted 
portion and the access role of the requester (Figures 10A - 10C and corresponding text; 
see also Col 2, Lines 41-67). 

Regarding Claim 5, Win discloses assembles web pages when the access role of 
the requesting user correlates (matches) with the access role associated with said 
interpreted portion (Col 3, Lines 1-15). 

Regarding Claims 7 and 16, Win discloses registration web page (Col 6, Lines 
20-26 and Lines 41-54); and 

in regard to assigning the role of manager (owner) to users (this limitations was 
addressed in the rejection of claim 1 above. In edition, Win also disclose the role of 
manager (administrator) (Col 13, Lines 8-16). 
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Regarding Claims 8 and 9, Win discloses: 

correlating web pages (resources) with roles (Col 3, Lines 26-27); 

correlating users with a role with a group (Col 2, Lines 57-67); and 

Brodersen discloses with each group including at least one user with a manager 
(owner) role (Abstract, i.e. granting of access to data and files by the file or database creator, owner 
or manager or by group or user access profiles; see also Col 1, Lines 6-8). 

Regarding Claim 10, the limitations of this claim were addressed in rejecting 
claims 1 and 8 above; the limitations of Claim 10 are a combination of both claims 1 and 
8; they are therefor rejected as set forth above. 

Regarding Claim 1 1 , the limitations of this claim were addressed in rejecting 
claims 1 and 9 above; the limitations of Claim 11 are a combination of both claims 1 and 
9; they are therefor rejected as set forth above. 

Regarding Claims 12 and 17, the limitations of this claim was addressed in 
rejecting claims 1 and 7 above. In edition, Win discloses adding and deleting users 
from group (see Win, Col 13, Lines 8-16). 

Regarding Claim 13, Win discloses associating roles to job titles (Figure No. 10B 
and associated text; see also Col 18, Lines 14-26, i.e. the role of sales manager). 
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Other Prior Art Made of Record 

8. a. Barkley et al. (U.S. Patent No. 6202066) discloses an implementation of 
role/group permission association using object access type; 

b. Win et al. (U.S. Patent No. 6161 139) discloses an administrative roles that 
govern access to administrative functions; and 

c. Helland et al. (U.S. Patent No. 6014666) discloses declarative and 
programmatic access control of component-based server applications using roles. 

Conclusion 

9. The prior art made of record and not relied upon is considered pertinent to 
Applicant's disclosure. 

Points of Contact 

1 0. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Haythim J. Alaubaidi whose telephone number is (571) 
272-4014. The examiner can normally be reached on Monday - Friday from 8:00 AM to 
4:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Safet Metjahic, can be reached on (571) 272-4023. 
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Any response to this office action should be mailed to: 

The Commissioner of Patents and Trademarks, Washington, D.C. 20231 or telefax at 
our fax number (703) 872-9306. 

Hand-delivered responses should be brought to the Customer Service Window of the 
Randolph Building at 401 Dulany Street, Alexandria, VA 22314 



Jfaythim J. JlCau6aidi 




' FRANTZCOBY 
PRIMARY EXAMINER 



Patent Examiner 
Technology Center 2100 
Art Unite 2161 



